Cyber Security Analyst

關於公司

三竹資訊為台灣金融資訊服務領導廠商，於2020年正式上櫃，股票代號：8284，提供行動看盤系統、行動銀行系統、行動廣告、智慧電視影音看盤系統、策略選股健檢系統、AP電腦看盤系統、SDK看盤軟體開發軟件、APP應用軟體系統、新一代推播整合系統、企業簡訊、大數據簡訊以及EIM企業即時通訊解決方案等。三竹資訊以卓越的研發能力，提供高資安、高品質的創新產品與優質服務，供客戶應用於金融、消費、通訊等多元化領域。

About the Role

Analyze security events and system telemetry to identify threats, investigate attack behavior, and develop practical detection methods.

Responsibilities

• Analyze security events, logs, and system behavior.
• Identify anomalous activity and potential indicators of compromise.
• Develop, validate, and tune detection rules and alert logic.
• Conduct incident investigations, attack path analysis, and impact assessments.
• Translate attack behavior into observable and verifiable detection methods.
• Perform threat hunting and follow-up analysis.
• Develop incident response procedures, SOPs, and playbooks.
• Maintain documentation of incident analyses, detection logic, and related technical procedures.

Qualifications

Required Qualifications

• 2+ years of experience in security monitoring, incident analysis, incident response, or related fields.
• Understanding of common attack techniques and defensive concepts.
• Experience with log analysis and basic network packet analysis.
• Familiarity with Windows or Linux systems.
• Ability to use Python, PowerShell, or shell scripting for analysis or automation.
• Ability to independently investigate security events and assess potential attack behavior and impact.

Preferred Skills

Preferred Qualifications

• Experience with SOC operations, incident response, detection engineering, or threat hunting.
• Experience with SIEM, EDR, endpoint security, or network security tools.
• Familiarity with MITRE ATT&CK, Sigma, YARA, KQL, or SPL.
• Familiarity with Windows Event Logs, Sysmon, ETW, or similar telemetry sources.
• Experience with malware analysis or reverse engineering.
• Experience with cloud security monitoring.
• Experience designing, validating, and tuning detection rules.

Required Skills

• 2+ years of experience in security monitoring, incident analysis, incident response, or related fields.
• Understanding of common attack techniques and defensive concepts.
• Experience with log analysis and basic network packet analysis.
• Familiarity with Windows or Linux systems.
• Ability to use Python, PowerShell, or shell scripting for analysis or automation.
• Ability to independently investigate security events and assess potential attack behavior and impact.

Preferred Skills

• Experience with SOC operations, incident response, detection engineering, or threat hunting.
• Experience with SIEM, EDR, endpoint security, or network security tools.
• Familiarity with MITRE ATT&CK, Sigma, YARA, KQL, or SPL.
• Familiarity with Windows Event Logs, Sysmon, ETW, or similar telemetry sources.
• Experience with malware analysis or reverse engineering.
• Experience with cloud security monitoring.
• Experience designing, validating, and tuning detection rules.